Cybersecurity Compliance (NIST SP 800-171 / CMMC Level 2)

This subcontract opportunity involves implementing cybersecurity controls in accordance with the NIST SP 800-171 standards and preparing for a third-party assessment to achieve CMMC Level 2 certification, aimed at safeguarding covered defense information. The work will be performed in Tracy, with a focus on ensuring compliance with Department of Defense requirements for protecting sensitive defense-related data within the contractor’s environment. The solicitation, issued by the ASC Supplier Operations AE and AF Division of the Department of Defense, falls under NAICS code 541512, which pertains to computer systems design services. The posting date for the opportunity is May 20, 2026, with a response deadline by May 28, 2026. The contract is designated as a subcontract, with no specified set-aside status or organization type indicated. This effort will support the overall defense industrial base's cybersecurity posture by enhancing the contractor’s compliance readiness ahead of required audits and assessments.